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The MAILING DATE of this communication appears on the cover sheet with the correspondence address » 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S. C. § 1 33). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )□ Responsive to communication(s) filed on . 

2a)D This action is FINAL. 2b)E3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 
Disposition of Claims 

4) ^ Claim(s) 1 - 21 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) ^ Claim(s) 1 -21 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) E3 The specification is objected to by the Examiner. 

10)[3 The drawing(s) filed on 28 September 2000 is/are: a)\3 accepted or b)[X] objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
1 1 )D The proposed drawing correction filed on is: a)Q approved b)Q disapproved by the Examiner. 

If approved, corrected drawings are required in reply to this Office action. 
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Specification 

1 . The disclosure is objected to because of the following informalities: on page 7 
line 9, "Authentication server 212" should apparently be authentication server 210 
instead. 

Appropriate correction is required. 

Claim Objections 

2. Claim 20 is objected to because of the following informalities: the order of the 
letters is inappropriate "c" should be "b" instead. Appropriate correction is required. 



Drawings 

3. The drawings are objected to because figure 4, reference character 406 is not 
mentioned in the description. In addition, figure 5, reference character 502 has two 
arrows going out of the reference character but one of the arrows does not have an 
appropriate label on it indicating its function. A proposed drawing correction or corrected 
drawings are required in reply to the Office action to avoid abandonment of the 
application. The objection to the drawings will not be held in abeyance. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
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invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 



5. Claims 1, 2 and 15 - 16 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over prior art admitted by the applicant in the specification (page 2-3) in 
view of Pile et al. (US 5,510,777). 

Regarding claim 1 , the admitted prior art (fig. 1) teaches a method for 
establishing secured roaming among a wireless station 108 and 1 10, a first and a 
second access points 100 and 102. The admitted prior art also teaches that the wireless 
station can roam between the access points. However, the admitted prior art fails to 
teach: the first access point requesting a first ticket from an authentication server and 
using the first ticket to establish a first secured session with the wireless station; and in 
response to a second ticket request from the wireless station through the first secured 
session, the first access point forwarding the second ticket request to the authentication 
server and relaying a resulting second ticket from the authentication server to the 
wireless station. However, Pile teaches the first LEC (Local Exchange Control, fig. 1) 
requesting a first ticket from an SCP (Security Control Point, 134-1) and using the first 
ticket to establish a first secured session with the wire line station 102; and in response 
to a second ticket request from the wire line station 102 through the first secured 
session, the first LEC 106 forwarding the second ticket request to the SCP 134-1 and 
relaying a resulting second ticket from the SCP 134-1 to the wire line station (col. 5, line 
61 through col.7, line 21). Therefore, it would have been obvious to one of ordinary skill 
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in the art at the time the invention was made to provide the teaching of Pile to the 
admitted prior art in order to grant access to each associated individual can be made 
further dependent upon a recognition of which of the individuals they are and a profile 
specifically associated with that individual. 

Regarding claim 2, the admitted prior art as modified by Pile also teaches: 
applying the second ticket and a group identity shared by the first and the second LEC 
106 to establish a second secured session between the wire line station and the second 
LEC 106 (col. 7, line 54 - 56). Therefore, it would have been obvious to one of ordinary 
skill in the art at the time the invention was made to provide the teaching of Pile to the 
admitted prior art in order to grant access to each associated individual can be made 
further dependent upon a recognition of which of the individuals they are and a profile 
specifically associated with that individual. 

Regarding claim 1 5, the admitted prior art (fig. 1 ) teaches a wired medium 1 1 2; a 
wireless medium 106; a server coupled to the wired medium 1 14; a wireless station 108 
and 110 coupled to the wireless medium 106; and access point 100 coupled to the 
wireless medium 106 and the wired medium 112. However, the admitted prior art fails to 
teach: a first control unit, comprising a first authentication protocol engine to request a 
first ticket from the authentication server and use the first ticket to establish a first 
secured session with the wireless station; and in response to a second ticket request 
from the wireless station through the first secured session, to forward the second ticket 
request to the authentication server and relays a resulting second ticket from the 
authentication server to the wireless station. However, Pile teaches a first SCP 134-1, 
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comprising a first authentication unit 218 to request a first ticket from the user 
authentication data 312 and use the first ticket to establish a first secured session with 
the wire line station 102; and in response to a second ticket request from the wire line 
station 102 through the first secured session, to forward the second ticket request to the 
authentication unit 218 and relays a resulting second ticket from the authentication unit 
218 to the wire line station 102 (col. 5, line 61 through col.7, line 21). Therefore, it would 
have been obvious to one of ordinary skill in the art at the time the invention was made 
to provide the teaching of Pile to the admitted prior art in order to grant access to each 
associated individual can be made further dependent upon a recognition of which of the 
individuals they are and a profile specifically associated with that individual. 

Regarding claim 16, the admitted prior art as modified by Pile also teaches: 
applying the second ticket and a group identity shared by the first and the second LEC 
106 to establish a second secured session with the second LEC 106 (col. 7, line 54 - 
56). Therefore, it would have been obvious to one of ordinary skill in the art at the time 
the invention was made to provide the teaching of Pile to the admitted prior art in order 
to grant access to each associated individual can be made further dependent upon a 
recognition of which of the individuals they are and a profile specifically associated with 
that individual. 

6. Claims 3, 5 - 6 and 1 7 - 1 8, 20 - 21 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over prior art admitted by the applicant in the specification (page 2-3) in 
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view of Pile as applied to claim 1 above, and further in view of Brown et al. (US 
5,689,563). 

Regarding claim 3, the admitted prior art as modified by Pile fails to teach: 
the authentication server dynamically generating a first and a second session keys to 
include in the first and the second tickets, respectively; and the authentication server 
encrypting the first and the second tickets with a first and a second encryption keys. 
However, Brown teaches the authenticating unit generating a first and a second session 
keys to include in the first and the second tickets, respectively; and the authenticating 
unit encrypting the first and the second tickets with a first and a second encryption keys 
(col. 3, lines 63 through col. 4 line 8). Therefore, it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to provide the teaching of 
Brown to the admitted prior art and Pile in order to create an encryption technique to 
alleviate problems associated with packetized data. 

Regarding claim 5, the admitted prior art as modified by Pile fails to teach: 
the first access point appending application specific information to the second ticket to 
formulate a combined message; and the first access point encrypting the combined 
message with the first session key. However, Brown teaches: the first fixed network 
communication unit 130 appending application specific information to the second ticket 
to formulate a combined message; and the first fixed network communication unit 130 
encrypting the combined message with the first session key (col. 6, line 45 - 54 of 
Brown). Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to provide the teaching of Brown to the admitted prior art 
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and Pile in order to create an encryption technique to alleviate problems associated with 
packetized data. 

Regarding claim 6, the admitted prior art as modified by Pile fails to teach: 
the application specific information further comprises the first access point's selected 
time and random number. However, Brown teaches the application specific information 
further comprises the first fixed network communication unit 130, selected instant- 
specific information and random challenge (RAND) (col. 6, line 14 and col. 7, line 39 - 
45). Therefore, it would have been obvious to one of ordinary skill in the art at the time 
the invention was made to provide the teaching of Brown to the admitted prior art and 
Pile in order to create an encryption technique to alleviate problems associated with 
packetized data. 

Regarding claim 17, admitted prior art as modified by Pile and Brown teaches: 
a switch center 128 to decrypt the second ticket request (col. 8, lines 16 - 24 of Brown) 
and Pile teaches a SPC 134-1 that forwards the second ticket request (col. 9, line 19 - 
52). Therefore, it would have been obvious to one of ordinary skill in the art at the time 
the invention was made to provide the teaching of Brown, Pile to the access point of the 
admitted prior art in order to create an encryption technique to alleviate problems 
associated with packetized data. 

Regarding claim 18, the claim is interpreted and rejected for the same reason as 
set forth in claim 3. 

Regarding claim 20, the claim is interpreted and rejected for the same reason as 
set forth in claim 5 
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Regarding claim 21, the claim is interpreted and rejected for the same reason as 
set forth in claim 6. 

7. Claims 4 and 19 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
prior art admitted by the applicant in the specification (page 2-3) in view of Pile and in 
view of Brown as applied to claim 3 above, and further in view of Williams (US 
5,475,735). 

Regarding claim 4, the admitted prior art as modified by Pile and Brown fails to 
teach: the first and the second session keys have limited lifetime. However, Fujino 
teaches the first and the second session keys have limited lifetime (col. 9, line 25 
through 27). Therefore, it would have been obvious to one of ordinary skill in the art at 
the time the invention was made to provide the teaching of Williams to the admitted 
prior art, Pile and Brown in order to offer the advantages of both a local loop service and 
mobile telephone stowice without the added expense of additional network elements to 
obtain customer mobility. 

Regarding claim 19, the claim is interpreted and rejected for the same reason as 
set forth in claim 4. 

8. Claim 7-9, 11- 14 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Brown in view of Pile. 

Regarding claim 7, Brown teaches: 
an antenna 154; inherently a filter coupled to the antenna; a receiver and a transmitter 
152; and a switch center 128 coupled to the receiver and the transmitter and coupled to 
a wired-network connection interface 132 wherein the switch center 128 further 
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comprises a database 136 (fig. 1). However, Brown fails to teach, authentication 
protocol engine that requests a first ticket from an authentication server and uses the 
first ticket to establish a first secured session with a wireless station; and in response to 
a second ticket request from the wireless station through the first secured session, 
forwards the second ticket request to the authentication server and relays a resulting 
second ticket from the authentication server to the wireless station. Pile teaches: the 
first LEC (Local Exchange Control, fig. 1) requesting a first ticket from an SCP (Security 
Control Point, 134-1 ) and using the first ticket to establish a first secured session with 
the wire line station 102; and in response to a second ticket request from the wire line 
station 102 through the first secured session, the first LEC 106 forwarding the second 
ticket request to the SCP 134-1 and relaying a resulting second ticket from the SCP 
134-1 to the wire line station (col. 5, line 61 through col. 7, line 12). Therefore, it would 
have been obvious to one of ordinary skill in the art at the time the invention was made 
to provide the teaching of Pile to Brown in order to grant access to each associated 
individual can be made further dependent upon a recognition of which of the individuals 
they are and a profile specifically associated with that individual. 

Regarding claim 8, Brown as modified by Pile teaches: 
a switch center 128 to decrypt the second ticket request (col. 8, lines 16 - 24 of Brown) 
and Pile teaches a SPC 134-1 that forwards the second ticket request (col. 9, line 19 - 
52). Therefore, it would have been obvious to one of ordinary skill in the art at the time 
the invention was made to provide the teaching of Pile to Brown in order to create an 
encryption technique to alleviate problems associated with packetized data. 
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Regarding claim 9, Brown as modified by Pile teaches: the authenticating unit 
generating a first and a second session keys to include in the first and the second 
tickets, respectively; and the authenticating unit encrypting the first and the second 
tickets with a first and a second encryption keys (col. 3, lines 63 through col. 4 line 8). 

Regarding claim 1 1 , Brown further teaches: the first fixed network communication 
unit 130 appending application specific information to the second ticket to formulate a 
combined message; and the first fixed network communication unit 130 encrypting the 
combined message with the first session key (col. 6, line 45 - 54). 

Regarding claim 12, Brown teaches the application specific information further 
comprises the first fixed network communication unit 130, selected instant-specific 
information and random challenge (RAND) (col. 6, line 14 and col. 7, line 39-45). 

Regarding claim 13, Brown teaches an antenna 124; an inherently filter coupled 
to the antenna; a subscriber unit 122; a micro processing stage 118 and an 
encryptor/decryptor 120 coupled to the micro processing stage 118. However, Brown 
fails to teach that the control unit further comprises an authentication protocol engine 
that requests a second ticket from an authentication server via an access point after 
having used a first ticket to establish a first secured session with the access point. Pile 
teaches that wire line station 102 requests a second ticket from a SCP 134-1 via LEC 
106 after having used a first ticket to establish a first secured session with LEC 106. 
Therefore, it would have been obvious to one of ordinary skill in the art at the time the 
invention was made to provide the teaching of Pile to Brown in order to grant access to 
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each associated individual can be made further dependent upon a recognition of which 
of the individuals they are and a profile specifically associated with that individual. 

Regarding claim 14, Brown as modified by Pile also teaches: 
applying the second ticket and a group identity shared by the first and the second LEC 
106 and 1 12 to establish a second secured session with the second LEC 112 (col. 7, 
line 54 - 56). Therefore, it would have been obvious to one of ordinary skill in the art at 
the time the invention was made to provide the teaching of Pile to Brown in order to 
grant access to each associated individual can be made further dependent upon a . 
recognition of which of the individuals they are and a profile specifically associated with 
that individual. 

9. Claim 10 is rejected under 35 U.S.C. 103(a) as being unpatentable over Brown 
and Pile as applied to claim 7 above, and further in view of Williams. 

Regarding claim 10, Brown as modified by Pile fails to teach: 
the first and the second session keys have limited lifetime. However, Fujino teaches the 
first and the second session keys have limited lifetime (col. 9, line 25 through 27). 
Therefore, it would have been obvious to one of ordinary skill in the art at the time the 
invention was made to provide the teaching of Williams to Pile and Brown in order to 
offer the advantages of both a local loop service and mobile telephone stowice without 
the added expense of additional network elements to obtain customer mobility. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to UN CHO whose telephone number is (703) 305-8725. 
The examiner can normally be reached on M ~ F 8:00AM to 4:30PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, VIVIAN CHIN can be reached on (703) 308-6739. The fax phone number 
for the organization where this application or proceeding is assigned is (703) 872-9306. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 305- 



4700. 
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